Splunk Search

How to count the number of issues (from Jira) that were created, only once?

YuliyaVassilyev
Explorer

I have data from Jira in Splunk, and issues (stories in particular) are counted multiple times because of modifications. For example I created a story and then edited it. Now it is counted twice in Splunk, but it should only be one story count. How to make sure it is only counted once.

0 Karma
1 Solution

efavreau
Motivator

@YuliyaVassilyeva Depending on your search query, there are a few ways. If you're using something common like stats or timechart, you might use distinct count. Example:

| stats dc(story) as DistinctCount
###

If this reply helps you, an upvote would be appreciated.

View solution in original post

efavreau
Motivator

@YuliyaVassilyeva Depending on your search query, there are a few ways. If you're using something common like stats or timechart, you might use distinct count. Example:

| stats dc(story) as DistinctCount
###

If this reply helps you, an upvote would be appreciated.

View solution in original post

YuliyaVassilyev
Explorer

That worked. Thank you!

0 Karma

efavreau
Motivator

@YuliyaVassilyeva Glad it worked! Please accept the answer, so others in Splunk Answers know this question has an acceptable answer. 🙂

###

If this reply helps you, an upvote would be appreciated.
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!